Skip to content

KBoffsec field notes

For Unix / macOS / Windows 128
Overview
- Apple macOS 13
  Overview
- Unix 100
  Overview
  - Apropos
  - apt
  - awk
  - base64
  - biosdecode
  - blkid
  - cal
  - cat
  - chage
  - chmod
  - chsh
  - comm
  - crontab
  - cut
  - date
  - dd
  - delv
  - df
  - diff
  - dig
  - dmesg
  - Faketime
  - fdisk
  - file
  - find
  - fls
  - free
  - ftp
  - Ghostscript
  - gpg
  - grep
  - groupadd
  - groupdel
  - hdparm
  - head
  - history
  - host
  - ifconfig
  - iotop
  - ip
  - iwconfig
  - journalctl
  - kill
  - ln
  - Locate
  - ls
  - lsb_release
  - lsblk
  - lshw
  - lsmod
  - lspci
  - lsusb
  - Lvextend
  - md5sum
  - mkdir
  - mkpasswd
  - modprobe
  - mount
  - mtr
  - nc
  - ncdu
  - netplan
  - netstat
  - network-manager
  - nm connection editor
  - nmcli
  - nslookup
  - ntp
  - passwd
  - Pdbedit
  - ps
  - rev
  - scp
  - script
  - sed
  - sha1sum
  - sha256sum
  - Shuf
  - sort
  - split
  - ss
  - strings
  - sudo
  - sudoedit
  - systemctl
  - tail
  - tar
  - tee
  - tftp
  - timedatectl
  - touch
  - tr
  - uname
  - upower
  - vimdiff
  - watch
  - wc
  - wget
  - xargs
  - xxd
- Microsoft Windows 15
  Overview
Common Vulnerabilities and Exposures (CVE) 37
Overview
"Random Stuff" 17
Overview
- Cheatsheets 16
  Overview
- Handy Links
Tools 536
Overview

Other Unix Framework macOS Windows Networking OSINT CVE Active Directory M365 AzureAD/EntraID DNS Forensics Impacket Cheatsheets Hash Cracking Linux LDAP

GitHub offsec.nl

Built by crypt0rr

© 2018-2026 - All rights reserved

root/Tools/OSINT

::tools

Netcraft DNS

NetCraft DNS lookup, includes sub-domains.

Updated: 2020-04-14
Trust: Review due

NetCraft DNS lookup, includes sub-domains.

Examples

Example Example

toolsreview-dueOSINTDNS

previousL333tlinked nextOSINT Framework

Explore from here

Follow references, sections, and shared topics to continue the investigation.

Parent sectionOSINT

Open Source Intelligence.

Shared tagsAmass

In-depth Attack Surface Mapping and Asset Discovery.

Shared tagsdnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple probes using retryabledns library.

Shared tagsassetfinder

Find domains and subdomains potentially related to a given domain.

Shared tagsCCrawlDNS

This small utility retrieves from the CommonCrawl data set unique subdomains for a given domain name.

Shared tagsCloudflair

A tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don't restrict network access to the CloudFlare IP ranges as they should.

Shared tagsSubfinder

Subfinder is a subdomain discovery tool that discovers subdomains for websites by using passive online sources.

Shared tagscrt.sh

Certificate Search.

Search knowledge base

query

sectiontag